Privacy notice
Who we are
This site is run by Explosive Boxing Ltd (company no. 15464881), 20 Brymore Road, Canterbury, CT1 1JE, the data controller for your booking details. Contact us any time on WhatsApp (+44 7401 898080).
What we collect when you book
Your name, email address and phone number, just enough to hold your place, email your confirmation, and contact you if a class changes. We need these to run your booking (in data-protection terms, performance of a contract). We also record that you ticked the health declaration, and when, but never your answers to the health questions themselves.
If you booked with us before this system
We carried your name, email address and phone number over from our previous booking system, so you can keep booking without starting again and we can find you if you book at the gym. That is all we brought across. If you never book here again we delete those details twelve months after the move, and you can ask us to remove them at any time.
If you buy a class pass
A pass is linked to your email address. That's how your remaining classes are found when you book. We keep the pass details (how many classes, what you paid, when it expires) and a record of each class it paid for. You choose your classes when you buy the pass, so they are all booked at that point. There is no separate code to redeem.
Payments
Card payments are handled by Stripe on their secure payment page. We never see or store your card details. We keep only the booking amount and a payment reference.
Who else handles your information
We use a small number of companies to run the booking system, and only for that purpose: Stripe takes card payments, Postmark sends your booking emails, Google Cloud stores the booking records on servers in London, and Cloudflare serves the website and runs the security check on the form. Your information is not sold, and it is not used for advertising.
We also use PostHog to tell us when something breaks. It records the technical details of an error so we can fix it, and those records are held in the United States. It is not used to track you, to build a profile, or for advertising.
Cookies
We use only what's strictly needed to run the site, so there's no cookie banner. That means: a security check by Cloudflare Turnstile on the booking form (it quietly filters out bots), Stripe's own cookies on their payment page (they make your payment work), and a sign-in cookie on the staff-only admin area. No advertising cookies, and nothing follows you around the web. Our error reporting (above) sets no cookie either: if something on a page breaks, your browser tells our own server what went wrong (the page and the technical error, with any email address removed), and only our server passes that on.
After you book, your browser keeps your name and email in its local storage so you don't have to type them next time. That never leaves your device, and "Not you? Change" on the booking form removes it.
While you are paying, your browser also keeps a note of the place we are holding for you: which class (for a pass, only the pass's own number), and a random booking number, never your name or any other detail. If the page is refreshed or closed, that note is how it finds your place again instead of making you start over. It is removed once you have paid, and it stops counting after 30 minutes. Nothing else is kept there.
We do count, without identifying anyone, how many visits reach each step of booking (a random number in your browser tab, never your name or email), so we can see where booking gets confusing and fix it. That number is forgotten when you close the tab, it is never shared with anyone, and it can't be traced back to you.
If your browser sends Global Privacy Control (a privacy setting some browsers and extensions offer), we honour it: your visit is not counted, and your name and email are not remembered on your device. Booking works exactly the same.
How long we keep it
Your contact details are removed from our booking records automatically 90 days after your class, and sooner if you ask. A pass keeps your email until 90 days after the pass expires (you need it to book with). The financial record of a booking or pass (amount and date) is kept for accounting, as the law requires, without your personal details attached.
Your rights
You can ask us to delete your personal details, or for a copy of what we hold, at any time. Reply to any booking email or message us on WhatsApp and we'll do it within a month. If you're ever unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Emails
We only email you about your bookings: confirmations, changes and refunds. No marketing without your explicit consent.